How in the world did they build this without being SOC 2 compliant?